Project

General

Profile

Actions

Feature #11417

closed

build ceph with hardening flags

Added by Ken Dreyer about 9 years ago. Updated about 7 years ago.

Status:
Resolved
Priority:
Normal
Category:
-
Target version:
% Done:

90%

Source:
other
Tags:
Backport:
Reviewed:
Affected Versions:
Pull request ID:

Description

See https://github.com/ceph/ceph/pull/3849 (which was closed)...

In src/Makefile-env.am, we should make the following changes:

  1. add -fPIE in the AM_COMMON_CFLAGS definition
  2. add -pie -Wl,-z,relro -Wl,-z,now to the AM_LDFLAGS definition
Actions #1

Updated by Sage Weil almost 9 years ago

  • Target version set to v9.0.2
Actions #2

Updated by Ken Dreyer almost 9 years ago

  • Assignee set to Siddharth Sharma
Actions #3

Updated by Siddharth Sharma almost 9 years ago

  • % Done changed from 0 to 90

Now it builds fine but without rest-bench for x86_64 it just fails at the moment to build that, though for i386 seems the patch build fine http://gitbuilder.sepia.ceph.com/gitbuilder-ceph-deb-trusty-i386-basic/log.cgi?log=d4a741da3039126fb3e5ab85cd9ffb23b7215cfb , need to fix rest-bench build failure with rest-bench.

Actions #4

Updated by Kefu Chai almost 9 years ago

  • Status changed from New to Fix Under Review
Actions #5

Updated by Jos Collin about 7 years ago

  • Status changed from Fix Under Review to Resolved

liewegas merged commit 6dd143d into master on 9 Aug 2015

Actions

Also available in: Atom PDF